Re: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-09 Thread Devendra Singh
At 09/06/04 14:03 (), you wrote: Hi Devendra, At 18:38 07.06.04 +0530, you wrote: >Hi, > >I am using Erwin Hoffmann's qmail-smtpd-auth-0.4.2. Thanks for using it. >I have noticed that once authenticated a user can use [EMAIL PROTECTED] >(where server.com is a domain listed in rcpthosts) in the FROM

Re: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-09 Thread Erwin Hoffmann
Hi Devendra, At 18:38 07.06.04 +0530, you wrote: >Hi, > >I am using Erwin Hoffmann's qmail-smtpd-auth-0.4.2. Thanks for using it. >I have noticed that once authenticated a user can use [EMAIL PROTECTED] >(where server.com is a domain listed in rcpthosts) in the FROM header. Is >there any reme

Re: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-08 Thread Devendra Singh
At 08/06/04 11:41 (), Tom Collins wrote: On Jun 7, 2004, at 9:28 PM, Devendra Singh wrote: I would like to re-frame my Subject: "SMTP Authenticated user is able to impersonate anyone in rcpthosts". You could re-frame it even more. Authenticated SMTP users can use any FROM address and submit mail

Re: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-07 Thread Tom Collins
On Jun 7, 2004, at 9:28 PM, Devendra Singh wrote: I would like to re-frame my Subject: "SMTP Authenticated user is able to impersonate anyone in rcpthosts". You could re-frame it even more. Authenticated SMTP users can use any FROM address and submit mail for any host. Some clients may have mul

Re: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-07 Thread Devendra Singh
At 07/06/04 21:27 (), you wrote: On Monday 07 June 2004 10:17 am, Devendra Singh wrote: > > Sorry Jeremy, > > Perhaps I was unable to explain the problem properly. > > Suppose a Server is hosting the following domains: > > abc.com > xyz.com > test.com > > ok. > Now, the user [EMAIL PROTEC

RE: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-07 Thread Shouguan Lin
The unified qmail patches include a patch to verify the FROM address with authenticated user. The patch is located at http://night.rdslink.ro/dudu/qmail/. Check README for 2004_05_02. Hope it helps. Shouguan Lin -Original Message- From: Devendra Singh [mailto:[EMAIL PROTECTED] Sent: M

Re: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-07 Thread Jeremy Kitchen
On Monday 07 June 2004 10:17 am, Devendra Singh wrote: > > Sorry Jeremy, > > Perhaps I was unable to explain the problem properly. > > Suppose a Server is hosting the following domains: > > abc.com > xyz.com > test.com > > ok. > Now, the user [EMAIL PROTECTED] has been enabled for SMTP

Re: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-07 Thread Devendra Singh
At 07/06/04 20:05 (), you wrote: On Monday 07 June 2004 08:08 am, Devendra Singh wrote: > Hi, > > I am using Erwin Hoffmann's qmail-smtpd-auth-0.4.2. > > I have noticed that once authenticated a user can use [EMAIL PROTECTED] > (where server.com is a domain listed in rcpthosts) in the FROM header.

Re: [vchkpw] SMTP Authenticated user is able to anyone in rcpthosts

2004-06-07 Thread Jeremy Kitchen
On Monday 07 June 2004 08:08 am, Devendra Singh wrote: > Hi, > > I am using Erwin Hoffmann's qmail-smtpd-auth-0.4.2. > > I have noticed that once authenticated a user can use [EMAIL PROTECTED] > (where server.com is a domain listed in rcpthosts) in the FROM header. even an unauthenticated user can